Google shuts down a sneaky malware backdoor on millions of Android TV and Google TV boxes
AI-summarised brief · reviewed before publication
Google announced it has severed ties with Videostrong, a manufacturer of certified Android TV and Google TV boxes, after uncovering a built‑in backdoor that allowed the company to sell access to a botnet and distribute malware. The malicious code was embedded in multiple device models, including many Mecool boxes, and used obfuscation to bypass Google’s certification tests, activating after first boot. Google has taken legal action to block the domains and servers that supported the XCPE botnet, banned Videostrong and its subsidiaries from selling any certified devices or software, and is overhauling its review process to prevent similar breaches. The takedown of command‑and‑control infrastructure is expected to cut off at least 10 million compromised devices, though users may still need to replace affected hardware.
💡 Why It Matters
- · By removing a covert supply‑chain threat, Google restores confidence in the Android TV certification and forces manufacturers to meet stricter security standards.
